# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1665 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1666 --- ## [Specify strict\_date\_optional\_time\_nanos format for date data type](https://discuss.elastic.co/t/specify-strict-date-optional-time-nanos-format-for-date-data-type/256246)
**Author:** [@chris\_pacb](https://discuss.elastic.co/u/chris_pacb)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 9:18pm UTC](https://discuss.elastic.co/t/specify-strict-date-optional-time-nanos-format-for-date-data-type/256246 "2020-12-02T21:18:07Z")
Hi all! I'm using "setup.template.append\_fields" in filebeat to specify extra fields. I can specify a "type" where I'm using "date" as the data type. How would I specify the "strict\_date\_optional\_time\_nanos" format. Th… --- ## [Using dot notation in POCO used with NEST search](https://discuss.elastic.co/t/using-dot-notation-in-poco-used-with-nest-search/257417)
**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 9:05pm UTC](https://discuss.elastic.co/t/using-dot-notation-in-poco-used-with-nest-search/257417 "2020-12-02T21:05:07Z")
I have a type of entry in elastic that is made of some imbricated properties like { "\_source": { "pipeline\_version":1.7, "agent":{ "hostname":"MyServer", "id":"a1df2f4e-6d… --- ## [SSL/TLS failed to load, java.io.IOException: extra data given to DerValue constructor](https://discuss.elastic.co/t/ssl-tls-failed-to-load-java-io-ioexception-extra-data-given-to-dervalue-constructor/256711)
**Author:** [@ctan](https://discuss.elastic.co/u/ctan)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 8:21pm UTC](https://discuss.elastic.co/t/ssl-tls-failed-to-load-java-io-ioexception-extra-data-given-to-dervalue-constructor/256711 "2020-12-02T20:21:28Z")
Hello! We are setting up our first Elasticsearch cluster and hit a problem with using our private CAs. I am able to get a cert and upload it, but every time I start elasticsearch I get errs around this: java.io.IOExcep… --- ## [Show top 100 most occured errors from log](https://discuss.elastic.co/t/show-top-100-most-occured-errors-from-log/257339)
**Author:** [@5JrA2ngS8Snub](https://discuss.elastic.co/u/5JrA2ngS8Snub)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 7:18pm UTC](https://discuss.elastic.co/t/show-top-100-most-occured-errors-from-log/257339 "2020-12-02T19:18:50Z")
FYI: I'm new to using the ELK stack. I want to have more (easier) insight into the apache error log data my servers are producing. My plan is to create dashboards that will show me the information I need. One of the mo… --- ## [Cannot connect locally run Logstash to influxdb in docker container](https://discuss.elastic.co/t/cannot-connect-locally-run-logstash-to-influxdb-in-docker-container/257280)
**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 9:52pm UTC](https://discuss.elastic.co/t/cannot-connect-locally-run-logstash-to-influxdb-in-docker-container/257280 "2020-12-01T21:52:05Z")
Hello, I'm running Influxdb in docker container and trying to connect from logstash which is running locally. I've enabled the influxdb-logstash plugin to connect to influxdb output { stdout { codec =\> rubydebug … --- ## [Filebeat HA servers](https://discuss.elastic.co/t/filebeat-ha-servers/256703)
**Author:** [@madhan0618](https://discuss.elastic.co/u/madhan0618)\ **Replies:** 4\ **Last updated:** [December 2, 2020, 6:17pm UTC](https://discuss.elastic.co/t/filebeat-ha-servers/256703 "2020-12-02T18:17:51Z")
I have a requirement where the log file that I am trying to pull can be on 1 of 4 servers at any given time. It is for my application that is in a HA cluster on 4 servers. Can i install filebeat on all 4 servers and make… --- ## [How to reindex data after 7.10 update](https://discuss.elastic.co/t/how-to-reindex-data-after-7-10-update/257101)
**Author:** [@rgeisman](https://discuss.elastic.co/u/rgeisman)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 6:15pm UTC](https://discuss.elastic.co/t/how-to-reindex-data-after-7-10-update/257101 "2020-12-02T18:15:41Z")
Hello all. We just completed our nice 7.10 update and I have read in the docs that it is necessary for us to reindex the data on ES after an upgrade. We are using 5 ES boxes and Logstash. Could someone point me to/pro… --- ## [Filebeat AWS Module & ELB fileset, got error in parsing NLB log](https://discuss.elastic.co/t/filebeat-aws-module-elb-fileset-got-error-in-parsing-nlb-log/257281)
**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 10:08pm UTC](https://discuss.elastic.co/t/filebeat-aws-module-elb-fileset-got-error-in-parsing-nlb-log/257281 "2020-12-01T22:08:54Z")
Hi there: I am using filebeat 7.9.3 with aws module and elb fileset enabled, running inside k8s. It is able to parse ALB log, but failed in paring Network load balancer log. The error message I got is error.message … --- ## [Can I do an OR logic Filter?](https://discuss.elastic.co/t/can-i-do-an-or-logic-filter/257395)
**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 5:03pm UTC](https://discuss.elastic.co/t/can-i-do-an-or-logic-filter/257395 "2020-12-02T17:03:49Z")
I'm trying to build an OR logic facet (aggregation). From what I understand the best way to filter a query for an aggregation value is to use the filter clause. That is because a filter limits the results without having … --- ## [How to sort by distance in aggregation?](https://discuss.elastic.co/t/how-to-sort-by-distance-in-aggregation/257391)
**Author:** [@isma-el](https://discuss.elastic.co/u/isma-el)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:47pm UTC](https://discuss.elastic.co/t/how-to-sort-by-distance-in-aggregation/257391 "2020-12-02T16:47:34Z")
Hello, is it possible to sort by geodistance in an aggregation ? I can't find a way to achieve this. I need aggregations to remove duplicates according to multiple terms, bu I need to sort the results by geodistance. … --- ## [How to extract data from filename using logstash?](https://discuss.elastic.co/t/how-to-extract-data-from-filename-using-logstash/257371)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 4:46pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-filename-using-logstash/257371 "2020-12-02T16:46:30Z")
I am using filebeat to monitor a directory for new files that get dropped in every hour. The files are then sent to logstash to be parsed before being sent to ES. The filenames are in this format aldb-E6-20201015232941.… --- ## [Use rank feature query as multiplier to the relevance score](https://discuss.elastic.co/t/use-rank-feature-query-as-multiplier-to-the-relevance-score/257388)
**Author:** [@praveshjain1991](https://discuss.elastic.co/u/praveshjain1991)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:32pm UTC](https://discuss.elastic.co/t/use-rank-feature-query-as-multiplier-to-the-relevance-score/257388 "2020-12-02T16:32:51Z")
As per the documentation, the rank feature query score is added to the overall query score. Since the relevance score itself is not bounded - the actual store depends on the data in your indices - how do I make the rank… --- ## [Concat String results in aggregation](https://discuss.elastic.co/t/concat-string-results-in-aggregation/257385)
**Author:** [@Yoandy\_Perez\_Villazo](https://discuss.elastic.co/u/Yoandy_Perez_Villazo)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 4:04pm UTC](https://discuss.elastic.co/t/concat-string-results-in-aggregation/257385 "2020-12-02T16:04:02Z")
He, I'm trying build a query with aggregation included, the aggregation define a sum of numeric values and i need further retrieve the \_ids list of items concatenated ... this is part of my aggregation ... "aggs": … --- ## [Kibana Rest API redirects to login](https://discuss.elastic.co/t/kibana-rest-api-redirects-to-login/256799)
**Author:** [@Ludo\_Vic](https://discuss.elastic.co/u/Ludo_Vic)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 3:37pm UTC](https://discuss.elastic.co/t/kibana-rest-api-redirects-to-login/256799 "2020-12-02T15:37:54Z")
Hi, I'm new to ElasticSearch and Kibana. I'm trying to use Kibana's REST API, but the response i get are redirections to /login whatever the request i try. For example : $ curl -v -u user:passwd -X GET "127.0.0.1:5601… --- ## [DSL query works with search but not update\_by\_query](https://discuss.elastic.co/t/dsl-query-works-with-search-but-not-update-by-query/257378)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 3:36pm UTC](https://discuss.elastic.co/t/dsl-query-works-with-search-but-not-update-by-query/257378 "2020-12-02T15:36:59Z")
Hi, If i run the following search query i get back the documents i expect, def get\_results(): search = es.search( index = "logs-\*", body = { "from": 0, "size": 10000, "query"… --- ## [AWS Cloudfront](https://discuss.elastic.co/t/aws-cloudfront/257165)
**Author:** [@Roxbip](https://discuss.elastic.co/u/Roxbip)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 3:32pm UTC](https://discuss.elastic.co/t/aws-cloudfront/257165 "2020-12-02T15:32:36Z")
Hi all, I'm new to elasticsearch and all this world. I installed EFK stack with some helm charts. my version is 6.8.13 for my stack and its on Kubernetes. All is working fine for now. I want to take my logs from AWS… --- ## [Embedding Kibana dashboard in HTML Anonymously](https://discuss.elastic.co/t/embedding-kibana-dashboard-in-html-anonymously/256653)
**Author:** [@nathansegers](https://discuss.elastic.co/u/nathansegers)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 3:18pm UTC](https://discuss.elastic.co/t/embedding-kibana-dashboard-in-html-anonymously/256653 "2020-12-02T15:18:15Z")
Hi there, I am using latest Elasticsearch and Kibana version through Elastic Cloud. I wish to embed a Kibana dashboard into a HTML, but I seem to have encountered some problems. I have tried the options to setup the N… --- ## [Weird validation behaviour with allow\_leading\_wildcard](https://discuss.elastic.co/t/weird-validation-behaviour-with-allow-leading-wildcard/257374)
**Author:** [@barakm](https://discuss.elastic.co/u/barakm)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 3:09pm UTC](https://discuss.elastic.co/t/weird-validation-behaviour-with-allow-leading-wildcard/257374 "2020-12-02T15:09:38Z")
The following query: { "query": { "bool": { "must": \[ { "query\_string": { "query": "\*Created", "allow\_leading\_w… --- ## [Does LDAP Active Directory Authentication works with Basic License](https://discuss.elastic.co/t/does-ldap-active-directory-authentication-works-with-basic-license/257369)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 2:58pm UTC](https://discuss.elastic.co/t/does-ldap-active-directory-authentication-works-with-basic-license/257369 "2020-12-02T14:58:55Z")
Hi Team, Does the LDAP Active Directory Authentication works with Basic license? Thanks, Ajesh --- ## [LogStash Not Receiving Logs](https://discuss.elastic.co/t/logstash-not-receiving-logs/257370)
**Author:** [@darkmatter](https://discuss.elastic.co/u/darkmatter)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 2:48pm UTC](https://discuss.elastic.co/t/logstash-not-receiving-logs/257370 "2020-12-02T14:48:45Z")
I'm looking for a little help troubleshooting a LogStash Docker issues. I'm using Docker ELK and having trouble with Logstash receiving any data and more specifically syslog data. I've confirmed that the host is receivi… --- ## [Login problem after embeddding our Kibana Dashboard to an external site](https://discuss.elastic.co/t/login-problem-after-embeddding-our-kibana-dashboard-to-an-external-site/256878)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 2:31pm UTC](https://discuss.elastic.co/t/login-problem-after-embeddding-our-kibana-dashboard-to-an-external-site/256878 "2020-12-02T14:31:34Z")
We have a login problem after embeddding our Kibana Dashboard to an external site. After copying the iFrame code of a dashboard and embeddding it, when we try to login into Kibana the login page just gets reloaded and i… --- ## [ES 7.9.2 and mail notification](https://discuss.elastic.co/t/es-7-9-2-and-mail-notification/257360)
**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 1:33pm UTC](https://discuss.elastic.co/t/es-7-9-2-and-mail-notification/257360 "2020-12-02T13:33:51Z")
HI Folks, I would like to test mail notification. here is the part of my elk.yml: xpack.notification.email: default\_account: exchange\_account account.exchange\_account.profile: outlook account.exchange\_account.ema… --- ## [Logstash pipelines - 2 simple questions](https://discuss.elastic.co/t/logstash-pipelines-2-simple-questions/257306)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [December 2, 2020, 1:12pm UTC](https://discuss.elastic.co/t/logstash-pipelines-2-simple-questions/257306 "2020-12-02T13:12:25Z")
Hi there, I have 2 simple questions regarding logstash pipelines: Is it possible in a pipeline - if I made a change and need this change a filter e.g. to take effect - to restart only this single pipeline.id? Or can I… --- ## [Postgresql queries in ELK](https://discuss.elastic.co/t/postgresql-queries-in-elk/256371)
**Author:** [@Charakterny](https://discuss.elastic.co/u/Charakterny)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 12:43pm UTC](https://discuss.elastic.co/t/postgresql-queries-in-elk/256371 "2020-12-02T12:43:23Z")
Hi, I installed metricbeat to provide metrics from postgresql and it works, but main goal was to analize queries in elastic and build dashboard for custom queries. As I started to configure, any statements from databas… --- ## [Logstash splitting and tagging events](https://discuss.elastic.co/t/logstash-splitting-and-tagging-events/256571)
**Author:** [@John\_Smith](https://discuss.elastic.co/u/John_Smith)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 12:02pm UTC](https://discuss.elastic.co/t/logstash-splitting-and-tagging-events/256571 "2020-12-02T12:02:15Z")
I need to ingest following json as separated events { "test1": {some nested json here}, "test2": {some nested json here}, "test3": {some nested json here}, "test4": {some nested json here} } I have 3 problems: When … --- ## [Index management](https://discuss.elastic.co/t/index-management/254724)
**Author:** [@antoteo](https://discuss.elastic.co/u/antoteo)\ **Replies:** 7\ **Last updated:** [December 2, 2020, 12:00pm UTC](https://discuss.elastic.co/t/index-management/254724 "2020-12-02T12:00:38Z")
Hello i have a case that people will upload their dataset excels csvs and other with python. their data will have different types, i want them to be able to search from all data. I know create one index in every upload b… --- ## [Discover: Result window is too large, from + size must be less than or equal to: \[10000\]](https://discuss.elastic.co/t/discover-result-window-is-too-large-from-size-must-be-less-than-or-equal-to-10000/257112)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 11:44am UTC](https://discuss.elastic.co/t/discover-result-window-is-too-large-from-size-must-be-less-than-or-equal-to-10000/257112 "2020-12-02T11:44:58Z")
Hi All, In an ES 6.8.6 cluster, I created an index pattern in Kibana and when I went to discover tab, I got the error Discover: Result window is too large, from + size must be less than or equal to: \[10000\] but was \[20… --- ## [Is there a good way to run benchmark to logstash on GKE?](https://discuss.elastic.co/t/is-there-a-good-way-to-run-benchmark-to-logstash-on-gke/257350)
**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 11:37am UTC](https://discuss.elastic.co/t/is-there-a-good-way-to-run-benchmark-to-logstash-on-gke/257350 "2020-12-02T11:37:50Z")
Here is an official tool but seems old: https://github.com/elastic/logstash-benchmark-tools Google provides a way but for security: https://cloud.google.com/blog/products/containers-kubernetes/gke-cis-benchmarks-deliver… --- ## [Does interval query work with Fast Vector Highlight?](https://discuss.elastic.co/t/does-interval-query-work-with-fast-vector-highlight/257262)
**Author:** [@zeusfsx](https://discuss.elastic.co/u/zeusfsx)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 6:26pm UTC](https://discuss.elastic.co/t/does-interval-query-work-with-fast-vector-highlight/257262 "2020-12-01T18:26:03Z")
I have a document, for example: { "text": "Index Down Jones", "title": "Index Down Jones" } And my mapping for text and title the same: "mappings": { "properties": { "text": { "type": "text… --- ## [Split a string to array/list, greedy match](https://discuss.elastic.co/t/split-a-string-to-array-list-greedy-match/255305)
**Author:** [@blukit](https://discuss.elastic.co/u/blukit)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 10:58am UTC](https://discuss.elastic.co/t/split-a-string-to-array-list-greedy-match/255305 "2020-12-02T10:58:11Z")
Hi all... I have a message field that contains multiline string. Need to split it to an array for each line, because will do some logic based on a certain lines. But so far only able to catch the first line. A simplifi… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1664) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1666)